Add a parser for AWS CodeGuru Security JSON output

[akash-manna-sky]

Add a parser for AWS CodeGuru Security JSON output

See : https://docs.aws.amazon.com/cli/latest/reference/codeguru-security/get-findings.html

Testing done

Submitter checklist

• Make sure you are opening from a topic/feature/bugfix branch (right side) and not your main branch!
• Ensure that the pull request title represents the desired changelog entry
• Please describe what you did
• Link to relevant issues in GitHub or Jira
• Link to relevant pull requests, esp. upstream and downstream changes
• Ensure you have provided tests that demonstrate the feature works or the issue is fixed

[uhafner]

Thanks, just some minor comments...

[uhafner]

This looks strange, it would make sense to replace it with:

Suggested change

	var filePath = vulnerability == null ? null : vulnerability.optJSONObject(FILE_PATH);
	issueBuilder
	.setFileName(firstNonBlank(filePath, PATH, NAME))
	if (vulnerability != null) {
	var fileName = firstNonBlank(vulnerability.optJSONObject(FILE_PATH), PATH, NAME);
	issueBuilder.setFileName(fileName);
	if (!fileName.isEmpty()) {
	issueBuilder.setLineStart(filePath.optInt(START_LINE, 0))
	.setLineEnd(filePath.optInt(END_LINE, 0));
	}
	}

[uhafner]

See comment above

[uhafner]

Suggested change

	private String formatSuggestedFix(final JSONObject suggestedFix) {
	private String formatSuggestedFix(@CheckForNull final JSONObject suggestedFix) {

[uhafner]

Suggested change

	private void appendSuggestedFixes(final List<String> sections, final JSONArray suggestedFixes) {
	private void appendSuggestedFixes(final List<String> sections, @CheckForNull final JSONArray suggestedFixes) {

[uhafner]

Isn't this the default?

[akash-manna-sky]

Sorry! now I removed the redundant else block to keep it default.

[github-actions]

☀️   Quality Monitor

Tests

     Unit Tests: ✅ successful — 1728 passed, 2 skipped
   ⛔   Architecture Tests: ✅ successful — 12 passed

Coverage for New Code

   〰️   Line Coverage: 100.00% — perfect 🎉
   ➰   Branch Coverage: 100.00% — perfect 🎉

Coverage for Whole Project

   〰️   Line Coverage: 94.23% — 504 missed lines
   ➰   Branch Coverage: 87.76% — 384 missed branches

Style

     CheckStyle: No warnings
     PMD: No warnings
   ☕   Java Compiler: No warnings

Bugs

     SpotBugs: No bugs
   🐛   Error Prone: No bugs

API Problems

   🚫   Revapi: No warnings

Vulnerabilities

   🛡️   OWASP Dependency Check: No vulnerabilities

Software Metrics

   🌀   Cyclomatic Complexity: 3247 (total)
   💭   Cognitive Complexity: 1831 (total)
   ➿   N-Path Complexity: 4444 (total)
   📏   Lines of Code: 31728 (total)
   📝   Non Commenting Source Statements: 11947 (total)
   🔗   Class Cohesion: 100.00% (maximum)
   ⚖️   Weight of Class: 100.00% (maximum)

🚦 Quality Gates

Overall Status: ✅ SUCCESS

✅ Passed Gates

• ✅ Overall Tests Success Rate: 100.00 >= 100.00
• ✅ Line Coverage in New Code: 100.00 >= 90.00
• ✅ Branch Coverage in New Code: 100.00 >= 90.00
• ✅ Potential Bugs in Whole Project: 0.00 <= 0.00
• ✅ Style Violation in Whole Project: 0.00 <= 0.00

---

Created by Quality Monitor v4.11.0 (#484bbba). More details are shown in the GitHub Checks Result.

[akash-manna-sky]

Thanks!